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NOTE FOR: DCI 

I think that this is a useful report, 
although I have some problems with it. I have 


asked Jack Blake to send copies to the Deputy 
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Deputy Director for 
National Foreign Assessment 
7E 44 Hqs 


DDA 78-S^o//^ 


Attached is for your review and 
comment to the DCI via DDCI and DDA. 


I 

STATIST!. 

i 


! 


John F. /Blake, Deputy Dire ctor fo r 
Administration, 7D 24 Hqs. 


4 Dec 78 
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Oriq RS - DCI Admin (AO/DCI) w/cy 16 of Att (by hand on 12/5/78) 

- DDA Subj w/cy 6 of Att 
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1 - JFB Chrono w/o Att 

Att: "A Security Review of the Central Intelligence Agency"— Nov 78 
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9 November 197S 


MEMORANDUM FOR: Deputy Director of Central Intelligence 
VIA: Acting Deputy Director for Administration 


FROM: 


SUBe . 

RE F E RjEu'i CHS : 


Robert W. Gambino 

Director of Security 

Report of the Security Review Task Force 

a. Memo for DDA from DDCI dtd 18 Aug 1978, 
subject:. Request for a Security Review 
and Assessment 

b. Memo for DDCI from DDA, dtd 31 Aug 1978, 
subject: Security Review - Interim Report 


1* Forwarded herewith is the Final Report of the Security 
Review Task; Force which was established pursuant to Reference a. 
As indicated in the Interim Report (Reference b) , the Task 
Force addressed itself to three topical areas: personnel 
security, physical security, and Information control. Because 
of the Imitation of time the report is not exhaustive, or 
totally definitive, especially with regard to resource alloca- 
tion. Additional planning effort will be necessary to implement 
the substantive recommendations contained in this report. 

2. i his summary does not include a number of recommenda- 

tions contained in working drafts which are less significant to 

the overall Agency security posture. Those which can be imple- 
mented within the present resource capability of the Office of 

Security have been or are being implemented. However, the Office 

of Security is not able to absorb additional programs which are 
manpower intensive. _ The core functions of this Office are being 

effectively accomplished today only because of many hours of 
voluntary uncompensated professional overtime. The time has 
come for bold action in terms of commitment of resources if the 
Agency is to significantly improve its security program. 


Approved For Release 2001/08/02 


Qrp 

CIA-RDP8f-b 


in 


E2 IMPDET 
Cl By 063344 

OS S 3 0 4 2 * * * * 7 


1000600080007-4 



25X1 A 
25X1 A 


Approved For Release 20^4/08/02 : CIA- 


ll42R00060008ttfl07-4 


3. One of the concerns expressed by the Senate Select 
Committee on Intelligence, the question of whether new 
employees should immediately be given access to highly sensi- 
tive material, was not addressed in detail by the Task Force. 

Its inquiries, however, indicated that it would be counter- 
productive for this Agency, with its highly selective per- 
sonnel, security and medical screening process, to limit new 
employees to nonsensitive and, consequently, nonproductive 
positions to further assess their security consciousness. In 
the specific case of the Operations Center, Dr. Sayre Stevens 
has indicated that he will personally insure that a careful 
review \vill be made of the personnel policies which involve 
the staffing of the Operations Center and that all alternatives 
will be explored prior to permitting vacancies to be filled 

by individuals recruited directly from outside the Agency. 

4. There is another area of interest in connection with 

a recent case which the Task Force did not pursue, i.e., improve- 
ments in lie detection and behavioral predictability. ORD has 
an ongoing research program in these vital fields in coordination 
with Office of Security and the Director^^o^Operations . The 
ORD effort is funded for FY 1979 at the ^^^^^^Bleve 1 . 
Unfortunately, 1980 funds have been cut The Chief, 

SE Division, Chief, Cl Staff, and myself ar^^9fWff?Ly interested 
in pursuing these objectives and are hopeful that current efforts 
which are of an exploratory nature, can be refined to a point 
where they can be used in our vetting and selective processes 
in the near future. Obviously, additional funding for FY 1980 
and out years will be required. . 

5. Technical assistance to document control is still 
being examined. The R§D Working Group of the Security Committee, 
in coordination with Agency components, is reviewing the possi- 
bility of diode technology, special papers and inks, and a 
number of other technical applications but, to date, these 
efforts ha\ r e not been too encouraging. 

6. The Area Security Officer concept (Recommendations 1 
and 2), as the report points out, was adopted from the Office 
of Security, CIA, by NSA, where it Is flourishing as a corner- 
stone of that agency’s security program. At CIA, unfortunately, 
we have seen the concept subordinated to parochial staffing/ 
budgetary interests to the point that it is virtually nonexistent 
I fully endorse the revitalization of this program but it is one 
which has measurable impact on resources, both of the Office of 
Security and the components concerned, and, consequently, is a 
matter properly for your executive decision. 
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' • i also endorse Recommendation 3 regarding security 
education and training; Recommendation 4 regarding reinvesti- 
gation and repolygraph at the end of a new employee's trial 
period; and Recommendation 5 which would amplify the scope of 
secret-level contractor clearance investigations. It is 
important to upgrade the requirements for access to secret 
material in anticipation of more conservative classification 
actions resulting from implementation of Executive Order 12065. 


8. Many of the recommendations deal with improved docu- 
ment control, ^the necessit^^hich is clearly established in 
the report The study, as well as implemen- 
tation of Executive urder 120657 should help reduce over- 
comp aremen tat ion and overclassification, both of which are root 
causes or the document control problems highlighted by the Task 
Force. However, there is major impact on resources, functions, 
and even organizational structure inherent in those recommenda- 
tions which must be addressed carefully. I feel that Recontmenda 
tions lb, 21, and 22 should be approved in any event because 
imp 1 emendation will bring about greater document control without 
dramatic increase in current resources. 


. 9 - 1 appreciate the trust implied in the fact that £his 

study^of security ^procedures and security-related matters was 
levied on the Office of Security in expectation that a no-holds- 
barred review would be conducted. I levied this assignment on' 
the Task Force m the same spirit. Not everything in the report 
is the^ way I would like to have seen it come out but I think 
that tne spirit of candor and self-criticism will ultimately pay 
dividends in necessary improvements in Agency security pro- 
c e dux* © s • 
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18 August 1978 


MEMORANDUM FOR: Deputy Director for Administration 

FROM : Deputy Director of Central Intelligence 

SUBJECT : The Kampiles Case - A Request for a Security Review^ 

and Assessment 
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1. It is obvious from the events of the past 48 hours regarding 
the Kampiles case that it is necessary to commence immediately a total 
and comprehensive review of all personnel security, physical security, 
and procedure security activities of this Agency. This review should 
focus on the policy basis of our entire security program as well as the 
procedures that flow from these policies. I would expect this review 
to lead to the most comprehensive recommendations seen to be necessary 
to preclude any such happening again in our future. 

2. I hereby task you to initiate such a comprehensive security 
review giving it your highest priority and personal attention. 


3. I will expect your first interim report, after scoping the 
problem, to be in my hands no later than 1 September 1978. 
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Deputy Director of Central .Intelligence 
John F. Blake 

Deputy Director for Administration 

Security Review - Interim Report 

Memorandum for DBA from DDCT, dated 
IS August 1978, Subject: A Request 
for a Security Review and Assessment 


1. Action Requested : Nona; for information only. 

2. Background : Following the mid- August 1973 revelation 
that a corner Agency employee had sold classified information 
to the Soviets, you directed a comprehensive review of the 
Agency’s security policies and procedures and called for an 
interim report oy 1 September 1973. Subsequently, the Director 
has expanded the scope of the inter in report to include: 

(a) a cataloguing of specific improvements In the Agency’s 
security program realized since hl3 appointment and by his 
Initiatives; and (b) a listing of procedures currently being 
initiated to further Improve the security of classified infor- 
mation* Pursuant to those directions, this interim resort is 
submitted. 

3. Staff Position : In April 1977, following the reve- 
lations ox the Mo ora and Boyce/Lee espionage cases, a compre- 
hensive impact study was completed by tho Office of Security. 

As a consequanco, the Director caused several security initiatives 
and gave the necessary impetus to others which have been success- 
fully implemented to tho enhancement of Agency and Intelligence 
Community security. Agency programs successfully implemented 
include: 


MEMORANDUM FOR: 
FROM; 

SUBJECT: 

REFERENCE; 


a. A rigorous staff personnel security 
reinvestigation program 
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b. Expanded security education, and r ©indoc- 
trination efforts throughout the Agency. 

c. Enhancement of appraisal criteria in 
Industrial Security Approvals. 

d. Initiation of ths Industrial Contractor 
Polygraph Program. 

e. Increased spot checks of briefcases, 
packages and parcels at all Agency facilities in 
the Washington Metropolitan area. 

f . Initiation of a program of unannounced 
security audits of Agency contractor facilities. 

g- Initiation of research to enhance security 
movement of classified information via taaper-resis taut 
security containers and to preclude unauthorized 
reproduction of documents via use of special paper, 
special inks and other techniques. 

h. A personal interest in and involvement by 
the Director and senior Agency managers in the 
adjudication: and penalty assessment procedures 
involving Agency employees who have violated secu- 
rity regulations. 

Programs initiated by the Director to tighten the secu- 
rity of the Intelligence Community have includod: 

a. The strengthening of the Director of Central 
Intelligence Security Committee as a focal point for 
reporting and tracking unauthorized disclosures and 
for raising security consciousness in the Community. 

b. Maintaining a freeze since 1 June 1977 on the 
total number of sensitive compartaentad clearances 
throughout the Community. 

c. Initiation of a program to revalidate security 
clearances by affecting zero-based reviews in Intelli- 
gence Community and contractor facilities . 

d. Directing contracting and legal authorities to 
strengthen the security provisions of contracts between 
commercial firms and Intelligence organizations. 
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X can assure you the Director of Security has and 
is continuing to dedicate all available personnel resources, 
as well as his personal attention, to the programs outlined 
above. 

V 

In accordance with your specific request of. IS August 
1973, a co-aprehensiv* review of the Agency’s security policies 
and procedures has commenced. 

During the week of 21 August tha organization and 
staffing of a Security Review Task Fores was undertaken. 

The Task Force will approach the review in three segments. 

Each segment staff will function under tha leadership of a 
senior experienced officer. The segments will address, 
separately. Personnel Security, Physical Security, and Infor- 
mation Control and Protection. Tha magnitude of tha task 
is awesome, and the Director of Security estimates a compre- 
hensive review will require a minimus of sixty (6G) days. 

The Personnel Security Segment of the Task Force 
intends to investigate all periods of an employee's career 
from preeaployment processing through post- employment counseling. 
It is their intent to survey personnel recruitment and assign- 
ment policies and procedures which are quite varied from 
directorate to directorate and from office to office . Although 
the emphasis in this segment will be on staff employees, the 
Task Fores will also survey the seyoraX other types of individuals 
who are utilized by the Agency. The entire security clearance 
process from pra- field investigation to final adjudication will 
be reviewed, as will the vast number of policies and procedures 
that pertain during the employment phase. 

The employment phase topics includa security indoctri- 
nation/ re indoctrination; marriage, including marriage to an 
alien; outside activities; handling of misconduct incidents; 
counterintelligence review of high risk personnel and organiza- 
tional units; the reinvestigation program; security and 
suitability reviews for overseas candidates; Agency management 
responsibilities; and the Personnel Evaluation Board. Finally, 
the Agency’s out-processing policies and procedures as well as 
current policies relative to post- employment counseling will by 
addressed under this segment. 

The Task Force will exclude from Its review the 
operational security policy procedures and practices concerning 
those individuals who are utilized by the Directorate of 
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of handling information at lower levels of classification 
or compartnentation; exploration of methods to reduce the 
amount of classified material retained in the Agency; inquiry 
into the efficacy of current ADP and micro-fort* information 
control, and the stata of pre-planning for future information 
technology requirements. Finally, we intend to examine alter- 
native ways of controlling accountability for classified 
materials, including automated tachniquus. 

Obviously, to conduct the survey effectively a the 
Ta3k Force will require the complete cooperation of the 
Agency’s population* For example, to meaningfully describe 
current procedures under the Personnel Security Segment is 
going to require close cooperation with several offices, 
especially the Office of Personnel and the Office of Medical 
Services. Furthermore » several offices throughout the Agency 
are involved in the recruitment of personnel, and their 
cooperation will also be necessary. Consequently , it is recom- 
mended that you solicit the cooperation of all directorates 
with the members of tho Task Force. 

The Task Force will approach its task by extensive 
documentary reviews, personal interviews both within and 
external to the Agency, and by discussion within the Task 
Force which will lead to a series of recommendations concerning 
the Agency's security program. The Task Force members have 
been exhorted to approach the task, particularly the recommen- 
dations, with absolute objectivity and personal integrity, as 
we view the review as an opportunity to assure our security 
policies and procedures are right for the time. 

We envision a final report to be submitted to you 
by 3 November 1973. We expect that report to be in four 
part3: (a) a description of current policies and procedures; 

(b) analysis of current policies and procedures; (c) conclusions; 
and (d) recommendations. 

The current review will be thorough. We anticipate 
specific recommendations pertaining to the restatement or tho 
basic principle that Security is a command responsibility 
within tho Agency, i.e., the responsibility of each manager 
and supervisor. Furthermore, wo expect to relate the apparent 
deterioration in security discipline in the operating components 
to the reduction of professional security positions in those 
components over the past decade; in ten years the number of 


. .. . - t 
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Nevertheless, the urgency of the present situation 
calls for tha implementation of improved procedures and new 
initiatives prior to completion of tha formal review. Towards 
that end the following actions have been taken: 


(a) Commencing 11 September 1973 the briefcase, 
package inspection program will be expanded and con- 
ducted by the Federal Protective Officers on a routine 
basis seven days a weak and twenty- four hours a day. 


(b) Commencing immediately, systematic counter- 
intelligence procedures will be established by the 
Office of Security to investigate employee accesses 
to secure areas outside of normal duty hours and to 
review tha pattern of employee after-hours accesses 
to Headquarters area buildings. 

(c) Tha Office of Security currently has ordered 
active studies into two methods of controlling document 
reproduction. One concept involves the modification 

of reproduction equipment to house a badge reader 
which would maintain accountability for all copies 
mace at least to the extent of maintaining an audit 
trail of an individual employee’s use of the equipment. 
The other concept involves development of a paper or 
print process which is not copiablo. 

(d) The Deputy Directors of the Agency are being 
directed, immediately, to establish positive, account- 
able document controls for particularly sensitive 
materials under their cognizance . 

(e) Arrangements are being finalized for the 
Office of Security to conduct a series of briefings 

of senior staffs throughout the Agency. The briefings 
will comprehensively review security problems discovered 
during the past several months through the reinvesti- 
gation program, briefcase inspection, program, etc., 
and will reemphasize the command and managerial rospon- ' 
sibility in implementing sound security practices. 
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(£) Ihf? Office of security is reminding A^encv 
managers that personnel are available as speakers 
panelists, consultants, etc, to assist command chan- 
nels m tne security education and reindoctrination 
of small employee groups. As you know, the Office 
ot security recently completed a formal reindoctri- 
nation of the Agency population in a number of 
presentations to large audiences. 


4. Conclusion : In accordance 
assure you that the Security Review 
priority and my personal attention. 
m my opinion, fully justifies a 3 
date. 


with the reference, I 
is receiving the highest 
The scope of the task, 
November 1578 final reporting 
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25 August 1973 


MEMORANDUM FOR: Director of Central Intelligence 

FROM: John F. Blake / 

Deputy Director for Administration 



r* 


a 


Stan: 


1 . Mindful of. the Kampil es- case and 

your strong desire that we be more aggres^^^^^tn^c^criarge 

of our security responsibilities, I am forwarding to you for your 
review the attached binder. We would have preferred to wait a 
little longer and presented you with a finished plan. I am 
sending you this working document, however, for two reasons. I 
do want- yoti^tcr krrow' that we’ a re= maarchi rtg; forward or. this front 
and, indeed, the work commenced before the Kampiles case surfaced.. 
You might note that, at Attachment 8, Bob Gambino started seeking 
additional legal advice as to how far he could go on this matter 
from OGC on 27 June 1978. Secondly, you have asked that we com- 
mence a "selective spot check" in the buildings as of Monday-*'-”'"' 
morning. As I have reviewed this plan, the target date for 
implementation of which is 1 September, I am somewhat persuaded 
we would be better off to wait the a^xtra week involved and have 
a capability to commence operation i (^a^uc^jnore studied fashion 

2 . F wcrtfl & appreciat:ei-you)^cminent^'i i f !i you i agree wi tff tfri sr 
, ap proach- whi ch . the.. Of fi ce of r* Security - has-- been wo rk i n g 0 n and , 

additionally v ; tf ; we ■ catr gefr* i nto^' thi smew-. mod©- on- 1 September . 
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MEMORANDUM FOR: 
FROM : 
SUBJECT 


18 August 1978 j f 

78 3901 

Deputy Director for Administration 

Deputy Director of Central Intelligence 

The Kampiles Case - A Request for a Security Review 
and Assessment 


1. It is obvious from the events of the past 48 hours regarding 
the Kampiles case that it is necessary to commence immediately a total 
and comprehensive review of all personnel security, physical security, 
and procedure security activities of this Agency. This review should 
focus on the policy basis of our entire security program as well as the 
procedures that flow from these policies. I would expect this review 
to lead to the most comprehensive recommendations seen to be necessary 
to preclude any such happening again in our future. 

2. I hereby task you to initiate such a comprehensive security 
review giving it your highest priority and personal attention. 

3. I will expect your first interim report, after scoping the 
problem, to be in my hands no late 
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1 September 1978 


D/ 



18 August 1978 
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SUBJECT: (Optional) 


Security Task Force Report 


c 


FROM: 


John F. Blake 

Deputy Director for Administration 


TO: (Officer designation, room number, and 
building) 


1. 


Director of Security 
4 E 60 


3 . 


7 . 


10 . 


11 . 


12 . 


13 . 


14 . 


15 . 


FORM 

3-62 


DATE 


RECEIVED FORWARDED 


EO/DDA/ 


NO. 


r 


1 '/$ WO//F ? 


DATE 29 December 


OFFICERS 

INITIALS 


COMMENTS (Number each comment to show from whom 
to whom. Draw a line across column after each comment.) 


Bob, 

I am not sure whether you had 
seen the attached note. I am 
sure ^^^^^^^land those who 
workecRr^n^uisk Force would 
be interested in the Director’s 
comment. 

I have received the NFAC and DDO 
responses and will hold them .. 
until I receive responses from 
DDS§T and 0/DCI, These will then 
be forwarded to you so that you 
may pull the comments together 
in some meaningful form to pass 
on to the DDCI, 


John F. Blake 


Att 
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